Secure your starting place

I. INTRODUCTION AND TERMS

1. GENERAL

With the operation of our website with the URL racecamp-events.com (hereinafter referred to as the "website"), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws - in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). With these data protection provisions, we want to inform you about which personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. In addition, we will explain to you what rights you have to protect and enforce your data privacy.

2. TERMS
Our privacy policy contains technical terms that are used in the GDPR and the BDSG. For your better understanding, we would like to explain these terms in simple terms in advance:

2.1 Personal data
"Personal data" means any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, their name or email address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining your own or third-party information to find out who the person is. A person can be identified, for example, by providing their address or bank details, their date of birth or user name, their IP addresses and/or location data. All information that can be used to identify a person in any way is relevant here.

2.2 Processing
Art. 4 No. 2 GDPR defines "processing" as any operation relating to personal data. This applies in particular to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

II. CONTROLLER AND DATA PROTECTION OFFICER

3. RESPONSIBLE
Responsible for data processing is:
Company: RACECAMP GmbH ("we")
Legal representative: Alexandra Nitzschmann (Managing Director)
Address: Hagenbeckstraße 154c, 22527 Hamburg
Phone: +49 160 2901110
E-mail: mail@racecamp-events.de

4. DATA PROTECTION OFFICER
We have appointed an external data protection officer for our company. You can reach him at:
Company: HABEWI GmbH & Co. KG
Legal representative: General partner HABEWI Beteiligungs GmbH, represented by Arne Platzbecker (Managing Director) 
Address: Palmaille 96, 22767 Hamburg 
Phone: 040/ 46008966 
Fax: 040/ 46008977 
E-mail: datenschutz@habewi.de

III. PROCESSING FRAMEWORK

5. PROCESSING FRAMEWORK: WEBSITE
As part of the website, we process the personal data of you listed in detail below in Section IV. We only process data that you actively provide on the website (e.g. by filling out forms) or that you automatically provide when using our website.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorised to issue instructions to our contractors. We use external service providers for the hosting of our website. We host our website with the external provider All-Inkl (ALL-INKL.COM - Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). If other external service providers are used for individual processing operations listed in Section IV, they will be named there.

We do not transfer data to third countries and do not plan to do so. We will provide information about exceptions to this principle in the processing described below. Any data transfer to third countries then takes place on the basis of the so-called EU standard contractual clauses.

IV. PROCESSING IN DETAIL

6. EVENT REGISTRATION (PURCHASE)

6.1 Description of the processing
You can register for events on our website. As part of your registration process, we process your personal data. The mandatory fields marked with an asterisk "*" in our registration form must be completed by you. Otherwise, we will not be able to conclude a contract with you and register you for the desired event. All other information is voluntary. When registering on our website, you can also select one of the payment methods offered - instant bank transfer, credit card, purchase on account or direct debit - to settle the costs. When you complete your registration, the data required for payment will be forwarded to the respective payment service provider. If you shop on our website as a registered user, you can enter your billing and delivery addresses as well as your preferred payment method in your user profile for faster and more convenient ordering.

6.2 Purpose
The processing takes place for the conclusion and fulfilment of contracts.

6.3 Legal basis
The processing is necessary for the conclusion and fulfilment of the contracts (Art. 6 para. 1 lit. b GDPR). This also applies to the transfer of data required for the processing of payments to the respective payment service providers.

6.4 Storage period
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after two years. This means that your data will then only be stored separately in order to comply with the statutory retention periods and will be deleted immediately after these have expired.

6.5 Receiver
In order to process your payment, personal data will be forwarded to one of the external payment service providers listed below and selected by you as part of your purchase:

• Mangopay: MANGOPAY S.A., 2 Avenue Amélie, L-1125 Luxembourg, www.mangopay.com/de/. Further information on data protection at Mangopay can be found at: https://www.mangopay.com/de/datenschutz/
  
  

7. COOKIES AND OTHER TRACKING TECHNOLOGIES

7.1 Description of the processing
Our website uses cookies. Cookies are small text files that are stored on the user's device when they visit a website. Cookies contain information that makes it possible to recognise a terminal device and possibly certain functions of a website. We differentiate between our own cookies and external, so-called third-party cookies. So-called "session cookies" and "persistent cookies" are used on our website. "Session cookies" are automatically deleted when you end your internet session and close the browser. Persistent cookies remain stored on your end device for a longer period of time. In addition to cookies, we also use other tracking technologies, such as pixels or so-called fingerprinting. If cookies are technically necessary for the operation of our website, your consent is not required. All other cookies and tracking technologies that are not technically necessary are only set after you have actively consented to the use of cookies/tracking technologies via our consent tool. To obtain and document consent, we use "Cookiebot", which is operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. The consent tool stores your selection itself in a cookie on your end device. This means that you do not have to make a decision about cookies again when you visit our website again.

You can find out which cookies are used on our website and for what purpose, how long they are stored on your end device and what consent you may have already given in the settings of the consent tool [...].

7.2 Purpose
We use cookies to make our website more user-friendly and to offer the functions described in section 7.1.

7.3 Legal basis
The processing is necessary with regard to technically required cookies and the use of the consent tool to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 7.2. The legal basis for the processing of all other cookies/tracking technologies that are not technically necessary is consent (Art. 6 (1) (a) GDPR). Such consent is voluntary.

7.4 Storage period, revocation of consent
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. As cookies are stored on your end device, you as the user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted. This can also be done automatically. If cookies are deactivated, deleted or restricted for our website, it may be that individual functions of our website cannot be used or can only be used to a limited extent. You can revoke any consent you have given to the use of cookies at any time in the settings of the consent tool [...] with effect for the future.

7.5 Receiver
When third-party cookies are used, data may be transmitted to the corresponding providers of these third-party services. Under certain circumstances, data may also be transferred to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transfer to third countries in the settings of the consent tool or in the corresponding section on the third-party service in this privacy policy. If necessary, personal data will also be transmitted to the service provider of the consent tool "Cookiebot", Cybot A/S.

7.6. Real Cookie Banner
We use the "Real Cookie Banner" consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. You can find details on how "Real Cookie Banner" works at <a href="/en/”https://devowl.io/de/rcb/datenverarbeitung/”/" rel="”noreferrer”" target="”_blank”">https://devowl.io/de/rcb/datenverarbeitung/</a>.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

8. CONTACT FORM AND CONTACT BY E-MAIL

8.1 Description of the processing
We have provided a contact form on our website for contacting us. In this form, you are asked to enter your e-mail address, your name and a message to us. When you click the "Send" button, the data is transmitted to us using SSL encryption (see section 16.). The contact form can only be transmitted if you accept our privacy policy by clicking on the corresponding checkbox. You can also contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.

8.2 Purpose
By providing a contact form on our website, we want to offer you a convenient way to get in touch with us. The data transmitted with and in the contact form or your e-mail will be used exclusively for the purpose of processing and responding to your enquiry.

8.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 8.2. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR).

8.4 Storage period
We will delete the data as soon as it is no longer required to fulfil the purpose for which it was collected. This is usually the case when the respective communication with you has ended. Communication ends when it can be inferred from the circumstances that your request has been conclusively clarified. If statutory retention periods prevent deletion, the data will be deleted immediately after expiry of the statutory retention period.

9TH NEWSLETTER

9.1 Description of the processing
We send out a newsletter at irregular intervals. We use the newsletter to inform you about events and promotions. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by completing and sending a newsletter registration form on our website. You can subscribe as part of an order in our online shop.

Only your e-mail address is required to subscribe to the newsletter. All other details (such as your first name and surname) are voluntary and are used solely to personalise the emails. We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. Firstly, you register for the newsletter on our website. You will then receive an e-mail from us at the e-mail address you have provided. In this e-mail, we ask you to confirm that you have actually registered for the newsletter and wish to receive it. Confirmation takes place by clicking on a confirmation link in the e-mail. Only after successful confirmation will we add you to our newsletter mailing list and send you future e-mails. As part of the double opt-in procedure, we store the date, time and your IP address both when you register and when you confirm.

9.2 Purpose
The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers. The collection and storage of the date, time and IP addresses when subscribing to the newsletter serves to document the consent given and to protect against the misuse of email addresses.

9.3 Legal basis
The processing of our subscriber newsletter is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. You can access the declaration of consent at any time on our website at [...]. Your consent is voluntary. The collection and storage of date, time and IP addresses when registering for the newsletter is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 9.2.

9.4 Storage period and revocation of consent
If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration e-mail, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can cancel your subscription to our newsletter at any time by revoking your consent. A simple declaration is sufficient for this (by e-mail to mail@racecamp-events.de or by post to RACECAMP GmbH i. G., Lehmweg 34, 20251 Hamburg). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter email or by sending an email to here possible. If you withdraw your consent, we will no longer send you newsletters and your personal data will be removed from our active mailing list. We will add your e-mail address to our so-called black list to a limited extent in order to enforce your cancellation. This enables us to ensure that you do not receive any newsletters from us in future and that your e-mail address is not misused by third parties.

9.5 Recipients and transfer to third countries:
We use the services of the newsletter provider Clever Reach to manage our newsletter mailing list and to send emails. This takes place within the framework of order processing. Clever Reach is an offer from CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. Further information on data protection at Cleverreach can be found at www.cleverreach.com/de/funktionen/datenschutz-sicherheit/

10. SOCIAL NETWORKS

10.1 Description of the processing
Our website does not use any social media plugins. The Facebook and Instagram logos displayed on our website are merely linked to the corresponding profiles of our company on the social networks. No data is transferred to the social networks when the logos are integrated. If you click on one of the logos, you will only be redirected to the external website of the respective social network.

However, our profiles within the social networks represent data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g. comment on, "share", "like" or "retweet" a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.

On the social network Facebook, we have the option of obtaining statistical data about the use of our Facebook page via the so-called "Insights" function. These statistics are provided by Facebook. The "Insights" function cannot be disabled. We cannot decide to switch this function on or off. It is available to all Facebook fan page operators, regardless of whether they use Facebook's Insights function or not. We are provided with the following data via Facebook Insights for a selectable period of time with regard to fans, subscribers, people reached and people interacting: Total number of page views, "Like" information including origin, page activity, post interactions, reach, post reach (divided into organic, viral and paid interactions), comments, shared content, replies and demographic analyses, i.e. country of origin, gender and age. The Insights statistics do not allow us to identify subscribers and fans of our site and view their profiles.

On the social networks Facebook and Instagram, we have the option of obtaining statistical data about the use of our Facebook page or our Instagram profile via the so-called "Insights" function. These statistics are provided by Facebook and Instagram. The "Insights" function cannot be cancelled. We cannot decide to switch this function on or off. It is available to all Facebook fan page operators and all operators of an Instagram business account, regardless of whether you use the Insights function or not.

We are provided with the following data in anonymised form via Facebook Insights for a selectable period of time with regard to fans, subscribers, people reached and people interacting: Total number of page views, "Like" information including origin, page activity, post interactions, reach, post reach (divided into organic, viral and paid interactions), comments, shared content, replies and demographic analyses, i.e. country of origin, gender and age. The Insights statistics do not allow us to identify subscribers and fans of our site and view their profiles.

Furthermore, Instagram Insights provides us with data in anonymised form about the development and reach of our Instagram profile and the posts, stories and videos we post there. In Instagram Insights, we also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile.

The social networks with which you communicate store your data using pseudonyms as user profiles and use them for advertising and market research purposes. For example, you may be shown adverts within the social network and on other third-party websites that match your presumed interests. As a rule, cookies are used for this purpose, which the social network stores on your end device. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the social networks directly.

10.2 Purpose
We maintain profiles on the aforementioned social networks for the purpose of public relations and corporate communication with customers and interested parties. We use the "Insights" function of Facebook and Instagram to analyse the reach of our posts on the social network and to make them more appealing to our visitors in the future.

10.3 Legal basis
The legal basis for data processing in the context of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 10.2. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 para. 1 lit. a GDPR. With regard to our Facebook page and our Instagram page, data processing is also carried out on the basis of joint responsibility in accordance with Art. 26 GDPR.

10.4 Recipients and transfer to third countries
The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection provisions.

• Facebook: Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA. Data protection provisions: www.facebook.com/policy.php; www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info.
• Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; Privacy Policy: help.instagram.com/155833707900388/.

The social networks also process your personal data in the USA.

11. GOOGLE ANALYTICS

11.1 Description of the processing

Our website uses "Google Analytics", a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics uses cookies (see section 7.), which enable your use of our website to be analysed. The information generated by the cookies is usually transferred to a Google server in the USA and stored there. However, we only use Google Analytics with IP anonymisation. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics compiled by Google Analytics record in particular how many users visit our website, the country or location from which access is made, which subpages are accessed and which links or search terms visitors use to reach our website. You can find the Google Analytics terms of use at www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics can be found at www.google.com/intl/de/analytics/learn/privacy.html retrievable. Google's privacy policy can be found at www.google.de/intl/de/policies/privacy view.

11.2 Purpose
The processing takes place in order to be able to analyse the use of our website. The information obtained is used to improve and customise our online presence.

11.3 Legal basis
Processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. This is obtained by us via the consent tool (see section 7.1). Such consent is voluntary.

11.4 Storage period and right to object, revocation of consent

We have explained the storage period as well as your control and setting options for cookies in section 7.4. You can revoke the consent you have given with regard to Google Analytics at any time in the settings of the consent tool with effect for the future. Alternatively, you can object to data processing by Google Analytics at any time by using the form provided by Google at tools.google.com/dlpage/gaoptout to download and install the browser add-on provided. The analysis data processed and stored with Google Analytics will be automatically deleted by us after 14 months.

11.5 Recipients and transfer to third countries
According to the German data protection supervisory authorities (Data Protection Conference), Google Analytics is jointly responsible for data processing on our behalf. Against this background, we have also concluded the "Google Measurement Controller-Controller Data Protection Terms" with Google. Google also processes your personal data in the USA.

12. FACEBOOK PIXEL

12.1 Description of the processing

Our website uses the remarketing service "Facebook Pixel", which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The "Facebook Pixel" enables us to place adverts on the social network that are targeted precisely at those Facebook users who have shown an interest in our offer - e.g. through a previous visit to our website. With the help of the "Facebook Pixel", we can also track and analyse the effectiveness and reach of our advertising on Facebook by recording whether Facebook users interact with our adverts on the social network by clicking on the adverts and being redirected to our website. When you visit our website, a connection to the Facebook servers is therefore established and the "Facebook pixel" is embedded in our website. In addition, Facebook may store a cookie on your end device (see section 7 above). If you are logged in to Facebook or log in to Facebook later, your visit to our website will be assigned to your user account. The data collected about you using the "Facebook pixel" is anonymous to us. It does not allow us to draw any conclusions about your person. However, Facebook can make a connection to your user profile. Data processing by Facebook is carried out in accordance with the company's data policy, which can be found at www.facebook.com/policy.php can be called up.

12.2 Purpose
The processing takes place in order to carry out targeted online advertising for our own offers and to be able to evaluate their effectiveness and reach.

12.3 Legal basis
Processing takes place on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR. This is obtained by us via the consent tool "Miscellaneous" (see section 7.1). Such consent is voluntary.

12.4 Storage period and right to object, revocation of consent

We have explained the storage period as well as your control and setting options for cookies/tracking pixels in section 7. You can revoke your consent to the collection of data by the "Facebook Pixel" and the use of your data to display Facebook adverts at any time in the settings of the consent tool with effect for the future. www.facebook.com/settings You can object to the collection of data by the "Facebook Pixel" and the use of your data to display Facebook adverts to Facebook at any time. You can do this within the settings of your Facebook account under www.facebook.com/settings decide which types of adverts are displayed to you on Facebook. This setting is applied across all devices. In addition, you have the option of declaring your objection by clicking on the following opt-out link: [...].

12.5 Recipients and transfer to third countries
By integrating the "Facebook Pixel", personal data may be transmitted to Facebook. Facebook also processes your personal data in the USA.

13. GOOGLE RECAPTCHA

13.1 Description of the processing
Our website uses "reCAPTCHA", a service operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (hereinafter referred to as "Google"). With reCAPTCHA, we can check in forms whether the input is made by a human or by automated software - in particular so-called bots. This allows us to protect our website from spam and misuse. In this context, your IP address, the time spent on the website, mouse movements made by you and any other data required for the reCAPTCHA service are transmitted to Google. Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=de-DE.

13.2 Purpose
The processing takes place in order to protect forms on our website against misuse and spam.

13.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 13.2.

13.4 Recipients and transfer to third countries
Google also processes your personal data in the USA.

14. YOUTUBE

14.1 Description of the processing
Our website uses services from "YouTube", a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as "YouTube"). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames so that they can be played directly on our website. The videos are embedded in the "extended data protection mode" offered on YouTube, i.e. no personal data will be transferred from you to Google as long as you do not play the videos. Only when you play a video will data be transferred to Google, over which we have no influence. If you play an embedded video on a subpage of our website, Google will be informed which subpage you have visited and which video you have watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as user profiles and uses them for advertising purposes, market research and/or the customised design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google can be found at www.google.com/intl/de-DE/policies/privacy/.

14.2 Purpose
The processing takes place in order to be able to show you videos on our website.

14.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 14.2.

14.4 Recipients and transfer to third countries
By integrating YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA.

15. GOOGLE WEBFONTS 

15.1 Description of the processing
Our website uses "Google Web Fonts", a font replacement service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Web Fonts replaces the standard fonts on your device with fonts from Google's catalogue when displaying our website. If your browser prevents the integration of Google Web Fonts, the text on our website will be displayed in the standard fonts of your device. The Google fonts are loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Web Fonts does not store any cookies on your end device. According to Google, data processed as part of the Google Web Fonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection at Google Web Fonts can be found at developers.google.com/fonts/faq?hl=en-DE&csw=1. General information on data protection at Google can be found at policies.google.com/privacy?hl=en-DE.

15.2 Purpose
The processing is carried out in order to display the text on our website in a more legible and aesthetically pleasing way.

15.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 15.2.

15.4 Recipients and transfer to third countries
By using Google Web Fonts, personal data may be transmitted to Google. Google also processes your personal data in the USA.

V. SAFETY MEASURES

16. safety measures
To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the user's end device. You can recognise active SSL or TLS encryption by the small padlock logo displayed on the far left of the browser's address bar.

VI. YOUR RIGHTS

17. rights of data subjects
With regard to the data processing described above by our company, you have the following rights as a data subject:

17.1 Information (Art. 15 GDPR)
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR under the conditions specified in Art. 15 GDPR.

17.2 Rectification (Art. 16 GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.

17.3 Erasure (Art. 17 GDPR)
You have the right to demand that we delete personal data concerning you immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes we are pursuing.

17.4 Restriction of data processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that enables us to verify the accuracy of your data.

17.5 Data portability (Art. 20 GDPR)
You have the right, under the conditions set out in Art. 20 GDPR, to demand the surrender of the data concerning you in a structured, common and machine-readable format.

17.6 Revocation of consent (Art. 7 para. 3 GDPR)
You have the right to withdraw your consent at any time in the case of processing based on consent. The revocation applies from the time of its assertion. In other words, it is effective for the future. Withdrawal of consent therefore does not retroactively render the processing unlawful.

17.7 Complaint (Art. 77 GDPR)
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU Member State of your place of residence, your place of work or the place of the alleged infringement.

17.8 Prohibition of automated decision-making/profiling (Art. 22 GDPR)
Decisions that have legal consequences for you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.

17.9 Right to object (Art. 21 GDPR)
If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR. However, this only applies if there are grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case - regardless of a particular situation - you have the right to object to the processing of your personal data for direct marketing purposes at any time.

Status: April 2021